Privacy Policy

Last updated: 6 October 2026

1. Controller

Khashayar Voshmgir
Rechte Wienzeile 25-27/1/17, 1040 Wien, Austria
Email: [email protected]
Phone: +43 699 13570707

This policy explains what personal data is processed when you visit this website, book a conversation, or when I contact you on LinkedIn, on what legal basis, and what rights you have. It is based on the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

2. Hosting and Cloudflare

This website is hosted and delivered by Cloudflare (Cloudflare Pages, DNS and protection against attacks). Cloudflare processes technical data your browser transmits, such as IP address, date and time, page requested, referrer and browser type.

Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, certified under the EU-US Data Privacy Framework.

Legal basis: legitimate interest in the secure and stable operation of the website (Art. 6 (1) f GDPR). Retention: I have no access to individual server logs; Cloudflare's privacy policy applies (cloudflare.com/privacypolicy).

3. Web analytics

This website uses Cloudflare Web Analytics. It sets no cookies and only produces aggregated visitor statistics. No personal profile is created.

Legal basis: legitimate interest in understanding how the website is used (Art. 6 (1) f GDPR).

4. Cookies

This website does not set cookies and does not use tracking pixels.

5. Booking a conversation

Bookings are handled by TidyCal (Sumo Group, Inc., Austin, Texas, USA), based on the EU standard contractual clauses (Art. 46 (2) c GDPR). TidyCal processes the data you enter there, such as name, email address and chosen time, and passes it to me. TidyCal's privacy policy applies: tidycal.com/privacy.

Legal basis: preparation of a contract at your request (Art. 6 (1) b GDPR). Retention: up to 6 months after our last exchange, unless a client relationship follows.

6. Email and calendar

If you contact me or we agree an appointment, I process the data you provide, using Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; processing also in the USA, certified under the EU-US Data Privacy Framework).

Legal basis: preparation or performance of a contract (Art. 6 (1) b GDPR), or legitimate interest in answering enquiries (Art. 6 (1) f GDPR). Retention: as long as needed for your request, then for statutory retention periods where applicable.

7. Clients

If we work together, the engagement terms you receive before the first session set out what data is processed, with which tools and for how long.

8. Recipients

Personal data is shared only with the providers named in this policy, including Notion for LinkedIn contacts (section 11), each of whom processes it on my behalf under a data processing agreement, and with authorities where the law requires it. Data is not sold and not shared with third parties for advertising.

9. Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise these rights, write to [email protected].

You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40-42, 1030 Wien, dsb.gv.at.

10. Changes

This policy is updated when the tools or processes on this website change. The date at the top shows the current version.

11. Contacting you on LinkedIn

If I contact you on LinkedIn first, I use data you have made public there: your name, profile link, role, company and public posts. Purpose: to contact you about my services. Legal basis: legitimate interest (Art. 6 (1) f GDPR).

Storage: Notion (Notion Labs, Inc., San Francisco, California, USA), certified under the EU-US Data Privacy Framework.

Retention: if you do not reply, your data is deleted 12 months after my last message. If we start a conversation, sections 5 to 7 apply.

Right to object: you can object at any time by replying "stop" on LinkedIn or by email (section 1). I then keep only your name and profile link, so that you are not contacted again.